CVE-2026-48048
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk29th percentile - higher than 29% of all known CVEs
Summary
XWiki Platform has a vulnerability that allows discovering user password hashes bit by bit via modified LiveTableResults parameters, even after a previous patch.
Risk Assessment
An attacker can retrieve a user's password salt and hash, potentially leading to account takeover and data confidentiality breach.
Recommendation
Update XWiki to versions 18.0.0RC1, 17.10.13, 17.4.9, or 16.10.17, which include the fix, or apply the manual workaround.
Original NVD description (English source)
XWiki Platform is a generic wiki platform. XWiki discovered that the patch for GHSA-5cf8-vrr8-8hjm was insufficient. Starting with version 6.2.1 and prior to versions 18.0.0RC1, 17.10.13, 17.4.9 and 16.10.17, with slightly modified parameters to the `LiveTableResults`, it is still possible to discover password hashes one bit at a time, so with 768 requests, the full password salt and hash can be retrieved of a user. The check for password (and email properties) has been adjusted in XWiki 18.0.0RC1, 17.10.13, 17.4.9 and 16.10.17. As a workaround, the patch can be applied manually to the wiki page `XWiki.LiveTableResultsMacros`.